Skip to content

docs: reflect the app-side opener amendment (punchin#278)#11

Merged
punchIn-app-bot merged 2 commits into
mainfrom
docs/opener-amendment
Jun 12, 2026
Merged

docs: reflect the app-side opener amendment (punchin#278)#11
punchIn-app-bot merged 2 commits into
mainfrom
docs/opener-amendment

Conversation

@punchIn-app-bot

Copy link
Copy Markdown
Member

Summary

  • punchin#278 (amended) now opens the feedback links with their opener, so the spec's "the app uses noopener" rationale is stale: both close-permission conditions are now kept true — opener for plain tabs (Firefox honours only that one), single-entry history via fetch-submit for Android Custom Tabs (the WebAPK→CCT hop severs any opener).
  • Design spec §6 and the render.js rationale comment updated. No behaviour change; CHANGELOG history left as written.

Type of change

  • CI / docs only (no version bump)

Checklist

Code

  • npm test passes (no behaviour change — comment/doc text only; CI re-runs the suite)
  • npm run check — N/A locally (no source semantics changed); CI runs it
  • If templates/ changed — N/A
  • New behaviour has a test added alongside it — N/A
  • No secret or personal address added to wrangler.toml [vars]
  • The safety guards are not weakened

Version & changelog

  • Version bump not required (docs/comments only)

Documentation

  • Design spec §6 updated; render.js rationale comment updated

Contributor License Agreement

I have read and agree to the PunchIn Feedback Worker Contributor License Agreement.

🤖 Generated with Claude Code

The app now keeps the opener on its feedback links (no 'noopener' —
first-party target; Firefox honours only the opener condition for
window.close()). The fetch-based submit remains the load-bearing path
for Android Custom Tabs, where the WebAPK->CCT hop severs any opener.
Comment + design-spec wording only; no behaviour change.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Jun 12, 2026

Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Updated (UTC)
✅ Deployment successful!
View logs
punchin-feedback c4a7ad8 Jun 12 2026, 12:09 AM

@punchIn-app-bot punchIn-app-bot added the documentation Improvements or additions to documentation label Jun 12, 2026
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
@punchIn-app-bot punchIn-app-bot merged commit 1370a42 into main Jun 12, 2026
4 checks passed
@punchIn-app-bot punchIn-app-bot deleted the docs/opener-amendment branch June 12, 2026 00:10
punchIn-app-bot added a commit that referenced this pull request Jun 12, 2026
…— punchin#277 (#12)

The app side (punchin#277) gates `from=app` on standalone and keeps
`noopener,noreferrer` on the feedback links — so the worker never receives a
`window.opener` and must not depend on one. The overlay close already works
without it (fetch-submitted single-history-entry `window.close()` for Chromium
Custom Tabs, native-✕ hint where the engine refuses), which is what CHANGELOG
[1.2.0] and render.test.js already document.

PR #11 had amended render.js's comment and the design doc to claim the app "keeps
the opener" (for Firefox) — contradicting both. This restores consistency:
- src/render.js: the close-mechanism comment no longer relies on an opener.
- docs/2026-06-07-punchin-feedback-design.md: from=app section matches (standalone-
  only, noopener, no reverse-tabnabbing surface).

Documentation only — no behavior change; worker stays v1.2.0. Tests 103/103, check
(wrangler dry-run) passes.

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

documentation Improvements or additions to documentation

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant